TaxMate Release Closeout
Use this only for the nijanthan-dev/taxmate-australia repo. Prefer gh for GitHub. Recheck live state before acting; memories are hints, not truth.
Preflight
- Confirm repo, remote, current branch, and worktree state.
- If work starts from
main, create a fresh fix/, feat/, or chore/ branch or worktree from current origin/main.
- Recheck issue/PR head SHA, mergeability, and unresolved review threads.
- Confirm the full local workflow and secret scans passed for the current head.
- If GitHub auth lacks scope, report the missing scope and stop. Do not run
gh auth refresh unless asked in the current turn.
Fix PR Review Comments
- Patch all current-head review comments, not only the easiest one.
- If feedback repeats or points to a contract class, update
scripts/taxmate_review_guardrails.py and focused tests before the one-off code fix.
- Audit the same failure pattern across flat, nested, itemized, generated, and rendered paths before re-requesting independent review.
- For generated skill/doc output, patch
scripts/skillgen.py or the source file first; do not hand-edit generated skills/*/SKILL.md unless the generator owns no path.
- Run focused tests for the touched area, then the repo's relevant validation path.
- Reply to each review thread with the fix and resolve it.
- Push and recheck the current head and review threads.
Validation Gates
Run the strongest relevant local checks before merge. Common TaxMate checks include:
./scripts/taxmate validate
./scripts/check-publication-ready.sh
gitleaks dir . --redact
Also run secret scans on history and the PR diff before merge. If a secret reached remote Git, stop and remove it from branch history before merge.
For ATO fetch/runtime changes, preserve curl --disable -L ordering and verify status, final URL, and body handling through tests.
For release/version changes, inspect .release-please-manifest.json, .codex-plugin/plugin.json, skill.json, plugin.lock.json, CHANGELOG.md, and Release Please config as applicable.
Merge And Release
- Squash-merge the fix PR only after local validation and secret-scan gates pass.
- Verify issue closure and updated
main state.
- Wait for Release Please to open the next release PR when the fix should ship.
- Inspect release PR version bumps and changelog, then run the local validation required for the changed files.
- Merge the release PR with squash merge.
- Verify tag, GitHub release, and version artifacts.
- Fast-forward local
main if safe.
- Clean merged temp branches/worktrees only after verifying no user changes would be lost. Preserve unrelated untracked paths.
Stop Conditions
Stop and report plainly when:
- Missing GitHub scope blocks required action.
- Full local validation is absent for the current head.
- Any Gitleaks gate finds a real secret.
- Release Please fails because required repo secret/config is missing.
- Cleanup would delete user work or an active worktree.
1---2name: taxmate-release-closeout3description: Execute TaxMate Australia repo PR closeout, local validation, and release delivery. Use when fixing or merging TaxMate Australia GitHub PRs, handling review comments, encoding repeated review lessons into validation checks/tests, running Gitleaks gates, merging Release Please PRs, verifying published tags/releases, or cleaning TaxMate worktrees/branches after release.4---56# TaxMate Release Closeout78Use this only for the `nijanthan-dev/taxmate-australia` repo. Prefer `gh` for GitHub. Recheck live state before acting; memories are hints, not truth.910## Preflight11121. Confirm repo, remote, current branch, and worktree state.132. If work starts from `main`, create a fresh `fix/`, `feat/`, or `chore/` branch or worktree from current `origin/main`.143. Recheck issue/PR head SHA, mergeability, and unresolved review threads.154. Confirm the full local workflow and secret scans passed for the current head.165. If GitHub auth lacks scope, report the missing scope and stop. Do not run `gh auth refresh` unless asked in the current turn.1718## Fix PR Review Comments19201. Patch all current-head review comments, not only the easiest one.212. If feedback repeats or points to a contract class, update `scripts/taxmate_review_guardrails.py` and focused tests before the one-off code fix.223. Audit the same failure pattern across flat, nested, itemized, generated, and rendered paths before re-requesting independent review.234. For generated skill/doc output, patch `scripts/skillgen.py` or the source file first; do not hand-edit generated `skills/*/SKILL.md` unless the generator owns no path.245. Run focused tests for the touched area, then the repo's relevant validation path.256. Reply to each review thread with the fix and resolve it.267. Push and recheck the current head and review threads.2728## Validation Gates2930Run the strongest relevant local checks before merge. Common TaxMate checks include:3132```bash33./scripts/taxmate validate34./scripts/check-publication-ready.sh35gitleaks dir . --redact36```3738Also run secret scans on history and the PR diff before merge. If a secret reached remote Git, stop and remove it from branch history before merge.3940For ATO fetch/runtime changes, preserve `curl --disable -L` ordering and verify status, final URL, and body handling through tests.4142For release/version changes, inspect `.release-please-manifest.json`, `.codex-plugin/plugin.json`, `skill.json`, `plugin.lock.json`, `CHANGELOG.md`, and Release Please config as applicable.4344## Merge And Release45461. Squash-merge the fix PR only after local validation and secret-scan gates pass.472. Verify issue closure and updated `main` state.483. Wait for Release Please to open the next release PR when the fix should ship.494. Inspect release PR version bumps and changelog, then run the local validation required for the changed files.505. Merge the release PR with squash merge.516. Verify tag, GitHub release, and version artifacts.527. Fast-forward local `main` if safe.538. Clean merged temp branches/worktrees only after verifying no user changes would be lost. Preserve unrelated untracked paths.5455## Stop Conditions5657Stop and report plainly when:5859- Missing GitHub scope blocks required action.60- Full local validation is absent for the current head.61- Any Gitleaks gate finds a real secret.62- Release Please fails because required repo secret/config is missing.63- Cleanup would delete user work or an active worktree.